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IN T^E CLAIMS 

1 . (cuirently amended) A method involving a presenter, a trusted party, and an acceptor 
for validating submitted profile data of said presenter during an on-line transaction, said method 
comprising 

receiving, by said trusted party during an enrollment process, profile data and enrollment 
data from spid presenter; 

verijfying, by said trusted party during said enrollment process using said enrollment data , 
the authenticity of said presenter and associating authentication data with said presenter; 

receiving said submitted profile data at said trusted party from said acceptor; 

comparing said submitted profile data against said profile data stored by said trusted 
party; j 

receiving, at said trusted party, submitted authentication data from said presenter during 
said on-line) transaction; 

authjenticating said presenter by comparing said submitted authentication data received 
from said presenter with said authentication data; 

validating said submitted profile data using results of said comparing and results of said 
authentic atiig; 

notil ying said acceptor by said trusted party that said submitted profile data of said 
presenter is either authentic or erroneous, whereby said trusted party validates said submitted 
profile data Df said presenter for the benefit of said acceptor. 

2. A method as recited in claim 1 further comprising: 

notifying said acceptor by said trusted party of the authenticity of said presenter, whereby 
said trusted party authenticates said presenter for the benefit of said acceptor, 

3. A method as recited in claim 2 wherein said notifying operation further comprises: 
notifying said acceptor that said presenter is authentic when said submitted authentication 

data received from said presenter matches said previously associated authentication data; and 

notifying said acceptor that said submitted profile data is authentic when said submitted 
profile data matches said profile data. 
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4. A ntethod as recited in claim 1 wherein the presenter communicates with said trusted 
party and with said acceptor over the Internet. 

5. A method as recited in claim 4 wherein said trusted party and said acceptor also 
communicate over the Internet. 

6. A nriethod as recited in claim 3 wherein the notifying operation regarding the authenticity 
of said presenter provides a definitive answer as to whether the authenticity and the submitted 
profile data of said presenter are authentic or not. 

7. A method as recited in claim 1 further comprising: 

receiving and storing said authentication data from said presenter at said trusted party 
during said enrollment process, wherein said authentication data becomes associated with said 
presenter, j 

8. (Canceled) 

9. An Lethod as recited in claim 1 further comprising: 

providing, by said trusted party, to said presenter a program identity number which is 
correlated with said profile data and said authentication data; and 
storing said program identity number by said trusted party. 

10. A ir ethbd as recited in claim 9 wherein said program identity number is an account 
number for a financial account of said presenter and wherein said trusted party is a financial 
institution t iat maintains said financial account. 

I 

It. A njethod as recited in claim 2, wherein prior to said trusted party receiving said 
authentication data, the method further comprising: 

iniii suing communications between said presenter and said acceptor; 

receiving said profile data* and a program identity number at said acceptor from said 
presenter. 



12. 



A m 



ethod as recited in claim 1 1 further comprising: 
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que -ying said trusted party by said acceptor whether said presenter can be authenticated 
and whether said submitted profile data of said presenter can be validated by said trusted party, 

13. A method as recited in claim 12 further comprising: 

querying said trusted party by said acceptor whether account data updating can be 
provided. | 



14. A method as recited in claim 12 wherein the querying operation is executed by 
transmitting a service enrollment request message from said acceptor to said trusted party via a 
directory server. 

15. An ethod as recited in claim 1 4 wherein said service enrollment request message 
includes a s aid program identity number originally provided to said acceptor from said presenter. 

16. A rr ethod as recited in claim 12 flinher comprising: 

infonning said acceptor by said trusted party whether said presenter can be authenticated 
and whethe|r said profile data of said presenter can be validated by said trusted party. 

17. A method as recited in claim 16 wherein the querying operation is executed by 
transmitting ; a service enrollment response message from said trusted party to said acceptor via a 
directory server. 

18. A no ethod as recited in claim 2 further comprising: 

transmitting a data authentication request message from said acceptor to said trusted party 
in order to Request that said trusted party authenticate said presenter and validate said submitted 
profile data of said presenter. 



19. A method as recited in claim 18 wherein said data authentication request message is 



transmitted 



from said acceptor to said trusted party via said presenter. 



20. A mbthod 
includes submitted 



as recited in claim 1 8 wherein said data authentication request message 
profile data originally provided to said acceptor from said presenter. 
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21. Air 
by transmit 



ethod as recited in claim 18 wherein both of said notifying operations are executed 
ing a data authentication response message from said trusted party to said acceptor. 



22. A rrjethod as recited in claim 21 wherein said data authentication response message is 
transmitted from said trusted party to said acceptor via said presenter. 



23. A method as recited in claim I further comprising: 

providing, by said trusted party, of updated profile data when said submitted profile data 
is determined to be out of date. 

24. A ir ethod as recited in claim 23 wherein the updated profile data contains account data. 
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(currently amended) An on-line data authentication system comprising: 
a presenter who submits enrollment data and profile data to a trusted party during an 
enrollmenr process, and with whom is associated authentication data during said enrollment 
process; 

said! trusted party who receives said enrollment data and said profile data during said 
enrollment jrocess, who verifies the authenticity of said presenter during said enrollment process 
using said enrollment data, who receives said authentication data from said presenter during an 
on-line transaction, and who authenticates said authentication data and validates said profile data 
of said a presenter during said on-line transaction; 

an acceptor who conducts said on-line a transaction with said presenter and who requests 
of said trusijed parry to authenticate said presenter and to validate said profile data of said 
presenter; aid 

a ditectory server configured to determine the existence of said trusted party who is able 
to authenticate said presenter and to validate said profile data of said presenter. 



26. A system 
configured to 



as recited in claim 25 wherein each of said acceptor and said trusted party are 
communicate with said presenter via the Internet. 



27. A system as recited in claim 25 wherein the trusted party is configured to provide a 
definitive answer as to whether said presenter and said profile data are ie authentic or not 
authentic. 1 



28. A system as recited in claim 25 further comprising: 

pre-<jtesignated authentication data previously submitted by said presenter, which is stored 
by said trusted party, wherein said trusted party authenticates said authentication data by 
comparing Jaid authentication data against said pre-designated authentication data. 



29. A system as recited in claim 28 further comprising: 

a pre gram identity number that is assigned to said presenter wherein said program 
identity nun ber is correlated to said pre-designated authentication data and said profile data. 

30. A system as recited in claim 29 wherein said program identity number is an account 
number for i. financial account of said presenter wherein said trusted party is a financial 
institution tt at maintains said financial account. 
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31. A 
a 

party via 
said 

said present 



32. 



directory 



system as recited in claim 25 further comprising: 

enrollment request message that is transmitted from said acceptor to said trusted 
directory server, said service enrollment request message containing a query to 
server and trusted parly as to whether said trusted party will be able to authenticate 
er and validate said profile data of said presenter. 



service 



said 



A system as recited in claim 31 further comprising: 
a service enrollment response message that is transmitted from said trusted party to said 
acceptor viz) said directory server, said service enrollment response message containing 
confirmatio i as to whether said trusted party will be able to authenticate said presenter and 
validate said profile data of said presenter. 

33. A svstem as recited in claim 25 further comprising: 

a data authentication request message that is transmitted from said acceptor to said 
trusted party in order to request that said trusted party authenticate said presenter and validate 
said profile Jlata of said presenter. 



34. A sybtem 
includes said 



as recited in claim 33 wherein said data authentication request message 
profile data of said presenter. 



35, A system as recited in claim 33 further comprising: 

a data authenti cation response message that is transmitted from said trusted party to said 
acceptor, sard data authentication response message including notification as to the authenticity 
of said presenter and the validity of said profile data of said presenter. 



36. 



A system as recited in claim 33 further comprising: 

a data, authentication response message that is transmitted from said trusted party to said 



acceptor, sai 



d data authentication response message including notification as to whether said 



profile data its accurate or contains errors. 
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37. (cui rently amended) A method involving a presenter, a trusted party, and an acceptor 
for providing profile data of said presenter during an on-line transaction, said method 
comprisingj 

receiving, by said trusted party during an enrollment process, profile data and enrollment 
data from said presenter; 

veri Fying, by said trusted party during said enrollment process using said enrollment data. 
the authenticity of said presenter and associating authentication data with said presenter; 

querying said trusted party by said acceptor for said trusted party to provide said profile 

data to saidjacceptor; 

i 

receiving, at said trusted party, submitted authentication data from said presenter during 
said on-line j transaction; 

comparing, by said trusted party, said submitted authentication data against said 
authentication data previously associated with said presenter; 

providing said profile data of said presenter, by said trusted party, to said acceptor; and 

notifying said acceptor by said trusted party of the authenticity of said presenter, whereby 
said trusted baity authenticates said presenter for the benefit of said acceptor and provides said 
profile data. 



38. (Canceled) 



39. A method 
party and with 



as recited in claim 37 wherein the presenter communicates with said trusted 
said acceptor over the Internet, 



40. A mQthod as recited in claim 39 wherein said trusted party and said acceptor also 



communicate over the Internet. 



41 . A method as recited in claim 37 wherein the notifying operation regarding the 
authenticity ^>f said presenter provides a definitive answer as to whether the authenticity and said 
profile data qf said presenter are authentic or not. 



42. (Canceled) 



43. (Canceled) 
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44. A method as recited in claim with claim 37 further comprising: 

providing, by said trusted party, to said presenter with a program identity number which 
is correlated with said profile data* and with said authentication data; 
sroring said program identity number by said trusted party. 

45. A method as recited in claim 44 wherein said program identity number is an account 
number for b financial account of said presenter wherein said trusted party is a financial 
institution tfcat maintains said financial account. 



tion tjat i 



46. Am 



sthod as recited in claim 37 wherein said profile data includes at least the name and 



address of s *id presenter. 



47, 



A method as recited in claim 37 further comprising: 
transmitting a data authentication request message from said acceptor to said trusted party 
in order to rpquesi that said trusted party provide said profile data of said presenter. 



48. A method 
transmitted 



as recited in claim 47 wherein said data authentication request message is 
.rom said acceptor to said trusted party via said presenter. 



49. A method as recited in claim 37 further comprising: 

requ|sting said presenter, by said trusted party* for said authentication data; and 

asking said presenter, by said trusted party, for permission to provide said profile data of 

said presenter to said acceptor. 



lithe 



50. A method as recited in claim 47 wherein said providing is executed by transmitting a data 
authenticatic n response message from said trusted party to said acceptor, said data authentication 
response message containing said profile data of said presenter. 



51. A method 
transmitted 



as recited in claim 50 wherein said data authentication response message is 
from said trusted party to said acceptor via said presenter. 
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(currently amended) An on-line data authentication system comprising: 
a presenter who submits enrollment data and profile data to a trusted party during an 
enrollment process, and with whom is associated authentication data during said enrollment 
process; j 

said trusted parry who receives said enrollment data and said profile data during said 
enrollment 'process, who verifies the authent icity of said presenter du ring said enrollment process 
using said enrollment data, who receives said authentication data from said presenter during an 
online transaction, and who authenticates said authentication data and provides said profile data 
of said a presenter to an acceptor during said on-line transaction; 

sai J acceptor who conducts said on-line transaction with said presenter and who requests 
of said trusjed party to authenticate said presenter and to provide said profile data of said 
presenter; and 

a directory server configured to determine the existence of said trusted parly who is able 
to authenticate said presenter and to provide said profile data of said presenter. 



53, A system as recited in claim 52 wherein each of said acceptor and said trusted party are 
configured !to communicate with said presenter via the Internet. 



54. A i 
definitive i 



s^rstem < 



as recited in claim 52 wherein the trusted party is configured to provide a 
answer as to whether said presenter is authentic or not authentic. 
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